Step one: forensic extraction
The process starts with a forensic extraction of the device. This preserves the data and the metadata, and produces a record of how the extraction was performed. The original is kept intact so everything that follows can be traced back to it.
Step two: processing and normalisation
The extracted messaging data is then processed. Participants are identified, timestamps are standardised, attachments are linked to their messages, and conversations are segmented sensibly. This is where raw extraction data becomes structured, reviewable conversation.
Step three: RSMF conversion and loading
The normalised conversations are converted into RSMF and loaded into Relativity alongside conventional documents. Reviewers can then read each conversation in sequence, with participants and timestamps intact, and apply date and keyword filtering across the message-level data.
Throughout, the transformations are recorded, so the route from device to reviewable item can be explained if it is ever questioned.
Key takeaways
- Extraction preserves the data and records how it was obtained.
- Processing turns raw extraction data into structured conversations.
- RSMF conversion lets chats be reviewed inside Relativity in context.
- Every transformation is recorded so the path stays explainable.
Frequently asked questions
How long does this take?
It depends on the device, the volume and the matter. Scoping the relevant custodians and date ranges keeps timelines and cost proportionate.
Can multiple phones be combined into one review?
Yes. Data from several devices can be processed and reviewed together, with each item traceable to its source.
Is the original ever altered?
No. The original extraction is preserved and the reviewable items are produced from it.
Discuss your matter in confidence
Speak to an eDiscovery specialist about forensic collection, processing and review support for your case.
Request a Confidential Consultation